Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File:                     qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier:          GdD+rqW1oevzcQXGzMrMmsw9XeBV/XIPEncGc6yMsSE=
Subject key identifier:   34:B4:D5:B4:CE:2E:CD:41:D8:57:FA:97:61:CE:03:E0:31:C1:17:5B
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer:       /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial:       019872984537FD3E3AF64EB2C6C661517F8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number:          038B
Signing time:             Mon 04 Aug 2025 01:00:38 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:38 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:38 +0000
Files and hashes:         1: YnK9gT6S7S0RgJeRsD04H4ISSzM.roa (hash: DtfDFV6FFewqe27Bp/4vezKhP0+2FJRS8CYQqbxzDS4=)
                          2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: T+Lqt57EwPjORF5DGBg7I4JymigmiwHXgRmPske+L90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:45:37:fd:3e:3a:f6:4e:b2:c6:c6:61:51:7f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
        Validity
            Not Before: Aug  4 01:00:38 2025 GMT
            Not After : Aug  5 01:00:38 2025 GMT
        Subject: CN=34b4d5b4ce2ecd41d857fa9761ce03e031c1175b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:25:78:d7:23:5d:59:72:7e:3c:7c:bd:d0:
                    9e:3b:70:41:19:07:d4:0a:78:0c:0b:2e:06:91:ff:
                    88:13:db:38:9e:24:c8:c2:a2:9d:75:87:eb:ef:59:
                    55:a3:3f:db:e3:55:90:0c:9b:5e:ca:df:94:32:fc:
                    93:81:92:90:7b:e8:e0:f1:c5:b0:51:aa:75:60:81:
                    ba:50:5a:06:fe:07:e5:12:41:d8:52:08:40:74:39:
                    88:a9:71:2e:59:9e:44:0b:8b:e2:1d:bb:b5:a4:f1:
                    45:03:e4:db:f6:44:22:c5:23:32:50:e4:23:fb:aa:
                    f8:5e:94:f8:a6:a9:86:4d:a6:66:b2:e4:9f:ca:a6:
                    53:ef:a7:d1:25:a0:af:97:b8:97:4f:da:1d:c8:be:
                    ba:4f:d0:51:17:8e:b8:42:79:61:77:0e:a6:96:5e:
                    40:d4:c7:37:47:d3:77:ca:99:f4:1f:ec:3c:7a:9a:
                    60:dd:0a:53:3f:aa:a8:7e:30:6b:9f:38:b4:a4:92:
                    23:d1:9d:36:4a:83:46:48:c4:9e:5e:7f:3d:e3:70:
                    31:6b:e5:f0:16:03:df:e1:08:f0:a2:ad:10:50:99:
                    76:fe:4c:6e:b9:42:ef:08:ae:d0:19:71:77:0f:d9:
                    19:42:be:5e:9b:35:cc:8b:35:45:7b:dc:0f:a9:c4:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B4:D5:B4:CE:2E:CD:41:D8:57:FA:97:61:CE:03:E0:31:C1:17:5B
            X509v3 Authority Key Identifier:
                keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a9:d1:09:96:94:f8:1f:ff:80:d2:f0:d6:47:56:cf:51:65:
         f5:46:1c:45:14:00:ea:c8:de:24:0b:7e:13:4f:9b:cd:a4:96:
         e0:00:8c:f3:3f:ce:9e:24:ca:e5:de:ba:cd:25:9b:bf:d6:bf:
         69:79:93:72:42:1b:a0:e4:fe:37:1a:8b:3a:67:48:cc:af:a8:
         07:9e:dd:64:87:64:db:ea:14:dc:ee:54:e6:23:9d:ea:b4:9b:
         52:94:55:37:5c:66:8b:08:e2:aa:65:94:e4:78:d3:b6:87:54:
         fd:a5:dc:fb:fc:3d:76:a7:a2:8c:f8:a8:46:a1:3f:80:b6:d8:
         c5:d6:d0:81:96:a6:ef:92:3b:6f:79:c0:ed:b8:fa:89:1c:2b:
         e6:91:06:b0:62:a8:ea:64:d7:d5:3e:99:ed:2e:52:4d:55:d2:
         4e:de:60:86:48:5d:b9:54:81:c2:25:fe:62:ee:7a:08:c8:5e:
         5e:ae:07:3b:60:16:16:f3:46:7f:70:a0:ec:39:e0:97:b7:49:
         d6:ec:b9:04:2b:45:9c:3d:a8:39:6d:4b:45:1b:c2:3c:a8:6e:
         72:02:5b:c0:c9:94:fb:60:23:68:63:91:f1:8f:83:ef:28:3f:
         55:5b:a4:bb:65:e1:d8:1a:a2:b9:ef:5c:76:24:fc:03:2e:5d:
         4d:e8:82:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:00 2025 by rpki-client